/*
 * To change this template, choose Tools | Templates
 * and open the template in the editor.
 */
package sgt.supermarket.controller.customer;

import java.io.IOException;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import sgt.supermarket.entity.Customer;
import sgt.supermarket.hibernatedao.HibernateDAOFactory;
import sgt.supermarket.util.ServletExtensions;

/**
 *
 * @author Administrator
 */
public class CustomerLogin extends HttpServlet {

    /** 
     * Processes requests for both HTTP <code>GET</code> and <code>POST</code> methods.
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     */
    protected void processRequest(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        HibernateDAOFactory factory = new HibernateDAOFactory();
        if (request.getMethod().equalsIgnoreCase("post")) {
            String personalId = ServletExtensions.getStringParam(request, "personalId");
            String cellphone = ServletExtensions.getStringParam(request, "cellphone");
            String password = ServletExtensions.getStringParam(request, "password");
            Customer customer = null;
            boolean emptyIdentification = false;
            if (personalId.isEmpty()) {
                if (cellphone.isEmpty()) {
                    emptyIdentification = true;
                    request.setAttribute("msg", "Either Personal Id or Cellphone must be provided");
                } else {
                    customer = factory.getCustomerDAO().getByCellphone(cellphone);
                }
            } else {
                if (cellphone.isEmpty()) {
                    customer = factory.getCustomerDAO().getByPersonalId(personalId);
                } else {
                    customer = factory.getCustomerDAO().getByPersonalIdOrCellphone(personalId, cellphone);
                }
            }

            if (!emptyIdentification) {
                if (customer == null) {
                    request.setAttribute("msg", "Cannot find customer account based on either Personal Id or Cellphone");
                } else if (!customer.isSecurityEnabled() || customer.getPassword().equals(password)) {
                    request.getSession().setAttribute("remoteCustomer", customer);
                    response.sendRedirect("viewPurchase");
                    return;
                } else {
                    request.setAttribute("msg", "Invalid password");
                }

                //re-display personalId and cellphone on form
                request.setAttribute("personalId", personalId);
                request.setAttribute("cellphone", cellphone);
            }
        }
        request.setAttribute("title", "Customer Login");
        request.getRequestDispatcher("/customer.customerLogin.tiles").forward(request, response);
    }

    // <editor-fold defaultstate="collapsed" desc="HttpServlet methods. Click on the + sign on the left to edit the code.">
    /** 
     * Handles the HTTP <code>GET</code> method.
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     */
    @Override
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        processRequest(request, response);
    }

    /** 
     * Handles the HTTP <code>POST</code> method.
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     */
    @Override
    protected void doPost(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        processRequest(request, response);
    }

    /** 
     * Returns a short description of the servlet.
     * @return a String containing servlet description
     */
    @Override
    public String getServletInfo() {
        return "Short description";
    }// </editor-fold>
}
